CVE-2026-94282

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-94282
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-94282.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-94282
Downstream
AZL (1)
DEBIAN (1)
ECHO (1)
OESA (4)
openSUSE (1)
SUSE (1)
UBUNTU (1)
Related
Published
2026-09-28T08:18:13Z
Modified
2026-10-17T10:46:55Z
Severity
  • 5.6 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H CVSS Calculator
Summary
Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion
Details

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client.

Database specific 
{
    "cna_assigner":  "suse",
    "cwe_ids":  [
        "CWE-125"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94282.json"
}
References

Affected packages

Git / gitlab.freedesktop.org/xorg/lib/libxi

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/xorg/lib/libxi
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
9ea632ab9dce9ad6630ef7db9d1850ea3d0a2419
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "1.8.4"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

Other
MODULAR_COPY
PRE_xf86-4_3_0_1
XACE-SELINUX-MERGE
XORG-6_7_99_1
XORG-6_7_99_2
XORG-6_7_99_901
XORG-6_7_99_902
XORG-6_7_99_903
XORG-6_7_99_904
XORG-6_8_0
XORG-6_8_1
XORG-6_8_1_901
XORG-6_8_1_902
XORG-6_8_1_903
XORG-6_8_1_904
XORG-6_8_2
XORG-6_8_99_1
XORG-6_8_99_10
XORG-6_8_99_11
XORG-6_8_99_12
XORG-6_8_99_13
XORG-6_8_99_14
XORG-6_8_99_15
XORG-6_8_99_16
XORG-6_8_99_2
XORG-6_8_99_3
XORG-6_8_99_4
XORG-6_8_99_5
XORG-6_8_99_6
XORG-6_8_99_7
XORG-6_8_99_8
XORG-6_8_99_9
XORG-6_8_99_900
XORG-6_8_99_901
XORG-6_8_99_902
XORG-6_8_99_903
XORG-6_99_99_900
XORG-6_99_99_901
XORG-6_99_99_902
XORG-6_99_99_903
XORG-6_99_99_904
XORG-7_0
XORG-7_0_99_901
XORG-7_1
XORG-MAIN
lg3d-base
lg3d-rel-0-6-2
lg3d-rel-0-7-0
libXi-1_0_1
rel-0-6-1
sco_port_update-base
xf86-012804-2330
xf86-4_3_0_1
xf86-4_3_99_16
xf86-4_3_99_901
xf86-4_3_99_902
xf86-4_3_99_903
xf86-4_3_99_903_special
xf86-4_4_0
xf86-4_4_99_1
libXi-1.*
libXi-1.1.0
libXi-1.2.99.1
libXi-1.2.99.2
libXi-1.2.99.3
libXi-1.2.99.4
libXi-1.3
libXi-1.4.0
libXi-1.4.1
libXi-1.4.2
libXi-1.4.99.1
libXi-1.5.0
libXi-1.5.99.2
libXi-1.5.99.3
libXi-1.6.0
libXi-1.6.1
libXi-1.6.99.1
libXi-1.7
libXi-1.7.1
libXi-1.7.1.901
libXi-1.7.10
libXi-1.7.2
libXi-1.7.3
libXi-1.7.4
libXi-1.7.5
libXi-1.7.6
libXi-1.7.7
libXi-1.7.8
libXi-1.7.9
libXi-1.7.99.2
libXi-1.8
libXi-1.8.1
libXi-1.8.2
libXi-1.8.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-94282.json"